Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
File: UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft (raw, json)
Hash identifier: SUOl1/v065pKi8rFdqh6utE5nRhJ0TjYjms/4VHIWZ4=
Subject key identifier: 92:FB:2B:69:5F:A7:48:C5:24:41:6F:AC:49:DD:89:6F:A9:1E:48:2C
Authority key identifier: 50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
Certificate issuer: /CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Certificate serial: 019D38D3439747FB696F6A3561BCD13B4D36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 09:01:02 +0000
Manifest this update: Sun 29 Mar 2026 09:01:02 +0000
Manifest next update: Mon 30 Mar 2026 09:01:02 +0000
Files and hashes: 1: 1cBPHp07EJ-UJNHMiRbTHD2251k.roa (hash: NcGpm88oPiijUJeByynWEeZDrBUROTCD4N4d0hBuT0w=)
2: O0z1dWysTLckLSWa-xjk4iWOyJo.roa (hash: xfK3oB04u+nOy6dQDoBykL7MzhjzL+9xzN4TDIDbuCg=)
3: UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl (hash: YWtyY5DtJwjZjKDAiXu0uzM83GXoX4Ef39mGIKpmj+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:43:97:47:fb:69:6f:6a:35:61:bc:d1:3b:4d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Validity
Not Before: Mar 29 09:01:02 2026 GMT
Not After : Mar 30 09:01:02 2026 GMT
Subject: CN=92fb2b695fa748c524416fac49dd896fa91e482c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d8:e4:19:53:a3:ca:6c:b0:d7:12:84:2b:94:
ce:ed:42:4c:ee:3f:3a:09:34:2d:d4:98:62:2b:eb:
83:91:75:37:1e:9a:a0:8b:b2:86:ac:00:38:63:07:
06:92:00:b9:9d:cb:77:e2:01:c9:30:48:d9:1b:1e:
08:1c:5c:43:2e:04:c7:a6:82:b9:a0:85:ae:49:8c:
25:1a:c0:5e:3b:2f:54:e5:3a:5b:57:97:de:00:2c:
44:8a:d1:09:75:af:46:88:28:c8:31:39:d0:11:0c:
48:53:25:f2:00:5b:d6:18:17:83:c5:c7:52:9b:13:
a3:8b:d3:0b:b9:39:f4:50:6f:e0:df:81:9b:e4:e8:
11:63:c4:c7:c8:e5:c9:a1:52:b7:f5:2e:2e:2e:e9:
c1:90:b2:76:64:78:1d:0c:f1:03:bd:3b:b3:22:ac:
da:35:46:f6:40:cc:ca:ab:71:ee:de:50:61:8f:14:
92:70:ae:34:34:22:ab:11:12:84:92:c6:29:7b:5b:
fa:ff:1c:01:d8:d7:76:48:94:a2:77:7b:3a:fc:8f:
dc:ac:dd:45:6f:5b:5e:3b:25:78:33:ae:88:28:fd:
4b:72:50:90:2e:85:09:13:c9:28:71:71:45:c9:1c:
19:0b:f8:d6:7b:6e:f1:e6:6d:7c:23:76:c6:03:32:
75:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FB:2B:69:5F:A7:48:C5:24:41:6F:AC:49:DD:89:6F:A9:1E:48:2C
X509v3 Authority Key Identifier:
keyid:50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:bc:d3:86:de:34:5b:08:6b:73:6c:f6:3d:aa:a1:11:3c:d8:
8d:fa:ec:b1:10:13:e9:bb:28:8e:2c:06:c2:7f:6d:e7:fa:b6:
0a:a3:02:49:a9:b2:9b:af:ec:70:12:ff:73:d6:be:77:fb:c9:
8d:a2:21:f4:5e:a7:f8:75:ea:7c:e2:34:6b:69:43:8d:bb:58:
c7:71:d0:42:c4:10:0c:38:1a:4a:18:9d:71:f6:9e:c9:31:58:
41:96:51:7e:13:31:dc:03:d4:84:5f:c5:ac:e5:c9:4d:de:3b:
d9:0f:95:cc:67:bc:8c:2b:1b:dc:af:af:1f:f2:0a:23:aa:5d:
dd:3d:d9:e7:7c:dd:15:5a:d8:4c:a0:b6:70:b2:d9:01:c5:a3:
0b:08:b5:d2:09:3b:a2:d6:96:c9:55:fa:6f:6e:d2:f9:2e:bd:
5f:ab:32:84:1a:02:69:8e:bd:93:ea:c9:9c:62:11:88:20:ee:
7c:37:e0:bc:51:85:f8:91:7c:ff:8b:d4:c3:6f:ca:6b:34:05:
fc:50:66:c8:51:50:be:49:e1:6d:c1:ab:74:5d:96:2e:fd:49:
f2:25:08:3c:6e:ff:88:d4:a1:b6:4a:69:37:bc:f4:09:82:d3:
14:48:3a:75:8e:c0:d0:1a:d1:d1:dc:12:b4:29:0f:e4:db:36:
d8:70:ac:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:43 2026 by rpki-client